安全网络模型研究

Research on the Secure Network Model

现有的TCP/IP网络中,IP地址承载了身份标识与地址定位的双重作用,语义过载,制约了互联网性能的进一步提升。在对已有的身份标识与地址分离的HIP协议、LISP协议进行深入研究的基础上,提出基于身份标识的LISP协议模型。该模型内置身份认证机制与密钥交换机制,从源头解决真实身份、安全通信等问题。

In existing TCP/IP network, IP address loads the function of both the location and the identity of host. Semantics overloading restricts the improvement of the Internet performance. Through the full research on existing HIP protocol and LISP protocol which separate the identifier and the address, this paper proposes a LISP protocol model based on host identity. Authentication mechanism and key exchange mechanism are built inside this model. The problems of true identity, security communication and other security points can be solved from the source.